High
CVE-2023-43646
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2023-31716
FUXA vulnerable to Local File Inclusion
Critical
CVE-2023-31719
FUXA SQL Injection vulnerability
High
CVE-2023-31718
FUXA local file inclusion vulnerability
High
CVE-2023-31717
FUXA SQL Injection vulnerability
Critical
CVE-2023-42810
systeminformation SSID Command Injection Vulnerability
Medium
CVE-2023-5104
Improper Input Validation in nocodb
Medium
CVE-2023-26144
graphql Uncontrolled Resource Consumption vulnerability
Medium
CVE-2023-26143
blamer vulnerable to Arbitrary Argument Injection via the blameByFile() API
Medium
CVE-2023-42399
Jodit Editor vulnerable to cross-site scripting
Critical
CVE-2023-33831
A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA
High
ghsa-22rr-f3p8-5gf8
Directus affected by VM2 sandbox escape vulnerability
Medium
CVE-2023-41592
Froala Editor Cross-site Scripting vulnerability
High
CVE-2023-38507
Strapi Improper Rate Limiting vulnerability
Medium
CVE-2023-37263
Strapi's field level permissions not being respected in relationship title
Medium
CVE-2023-36472
Strapi may leak sensitive user information, user reset password, tokens via content-manager views
High
Exploited in attacks
CVE-2023-4863
libwebp: OOB write in BuildHuffmanTable
High
CVE-2023-39584
Hexo `include_code` has a path traversal
Medium
CVE-2023-41646
Buttercup allows attackers to obtain the hash of the master password
Medium
CVE-2023-39956
Electron vulnerable to out-of-package code execution when launched with arbitrary cwd
Medium
CVE-2023-29198
Electron context isolation bypass via nested unserializable return value
High
CVE-2023-23623
Electron's Content-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled
High
CVE-2023-41058
Trigger `beforeFind` not invoked in internal query pipeline when fetching pointer
High
CVE-2023-41049
Improper Neutralization of Script in Attributes in @dcl/single-sign-on-client
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.